This Privacy Policy explains how Lalabet Casino, operated at lalabet.io (hereinafter "Lalabet", "we", "us" or "our"), collects, uses, stores, shares and protects your personal data when you register an account, make a deposit or withdrawal, claim a bonus, use the sportsbook, contact support, or otherwise interact with our platform. Lalabet Casino is licensed under a Curaçao eGaming licence and is committed to handling your personal information responsibly and in accordance with applicable data-protection law. Please read this policy carefully before using lalabet.io.

1. Who We Are

Lalabet Casino is operated under a Curaçao eGaming licence and accessible at lalabet.io. We are the data controller in respect of the personal data you provide to us or that we collect about you through your use of our website, mobile browser experience, and Progressive Web App (PWA). Any reference to "the site" or "the platform" in this policy means lalabet.io and all services available through it, including the casino lobby, live casino, sportsbook, loyalty programme, and payment facilities.

If you have any questions about this policy or wish to exercise your data-protection rights, you may contact us at any time via our 24/7 live chat or by email through the contact details provided in the Contact Us section of this policy.

2. The Personal Data We Collect

We collect personal data in several ways: directly from you when you register or use the site; automatically as you navigate the platform; and from third parties involved in payment processing, identity verification, and fraud prevention.

2.1 Data You Provide to Us

• Registration data: full name, date of birth, email address, postal address, country of residence, and username and password chosen during sign-up.
• Identity and verification documents: copies of government-issued photo identification (e.g. passport or driving licence), proof of address (e.g. utility bill or bank statement), and, where required, source-of-funds or source-of-wealth documentation. These are collected as part of our Know Your Customer (KYC) obligations described in Section 6.
• Payment data: details necessary to process deposits and withdrawals, including card numbers (last four digits retained), e-wallet identifiers (Skrill, Neteller), bank account details for bank transfers, and cryptocurrency wallet addresses (Bitcoin, Ethereum, Litecoin). Full card numbers and authentication credentials are processed by our payment service providers and are not stored on our servers.
• Communications data: records of live-chat conversations, emails, and any other correspondence you send to us, including support requests and complaints.
• Responsible gambling data: information you provide when setting deposit limits, requesting self-exclusion, or using any other responsible-gaming tool available on the site.
• Bonus and promotional data: records of bonus claims across our ten-deposit welcome package and any ongoing weekly or VIP promotions, including deposit amounts, stages claimed, and wagering activity.

2.2 Data We Collect Automatically

• Technical data: IP address, browser type and version, operating system, device type and identifiers, time zone, and referring URL.
• Usage data: pages visited, games played (slots, live casino tables, sportsbook markets), session duration, bet amounts, game outcomes, and features accessed.
• Transaction data: details of every deposit and withdrawal transaction, the payment method used, currency, amount, timestamp, and processing status.
• Cookies and similar technologies: see Section 11 (Cookies) for full details.

2.3 Data We Receive from Third Parties

• Identity and fraud-screening results from KYC and anti-money-laundering (AML) verification providers.
• Transaction status and risk signals from payment processors, card schemes, and cryptocurrency networks.
• Information from publicly available sources, sanctions lists, and politically exposed persons (PEP) databases used for compliance screening.
• Technical security data from fraud-detection and device-fingerprinting services used to protect your account.

3. How We Use Your Personal Data

We only use your personal data where we have a lawful basis for doing so. The table below sets out the main purposes for which we process your data and the legal basis we rely on for each.

4. Sharing Your Personal Data

We do not sell your personal data to third parties. We share your data only where necessary and with appropriate safeguards in place.

4.1 Service Providers and Data Processors

We share data with trusted third-party service providers who process data on our behalf and under our instruction, including:

• Payment processors: Visa, Mastercard, Skrill, Neteller, bank transfer providers, and cryptocurrency networks (Bitcoin, Ethereum, Litecoin) to execute deposits and withdrawals within the stated processing times and limits.
• KYC and identity-verification providers: to carry out document checks, age verification, and AML screening as described in Section 6.
• Fraud-prevention and security providers: to detect suspicious login activity, account takeover attempts, and bonus abuse.
• Game and platform providers: studios and aggregators such as Pragmatic Play, Evolution, NetEnt, Play'n GO, Hacksaw Gaming, Push Gaming, Nolimit City, Red Tiger, Yggdrasil, BGaming, and others, who may receive limited technical and session data necessary to deliver their games.
• Customer-support technology providers: platforms used to power our 24/7 live chat and email support services.
• Analytics and performance providers: tools used to measure site performance, identify technical issues, and understand usage patterns.
• Marketing platforms: where you have consented to receive promotional communications, we may use email or messaging platforms to deliver them.

4.2 Regulatory and Legal Disclosure

We may disclose your personal data to regulatory authorities, law-enforcement agencies, courts, or other competent bodies where we are required to do so by law, court order, or under the conditions of our Curaçao eGaming licence. This includes disclosures related to AML investigations, fraud enquiries, and responsible-gambling enforcement.

4.3 Business Transfers

If Lalabet Casino undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you by email or prominent notice on lalabet.io before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We will share your data with any other party only where you have given us explicit consent to do so.

5. International Data Transfers

Lalabet Casino operates internationally, and some of our service providers, including payment processors and game studios, may be located or process data outside your country of residence. Where data is transferred to countries that do not provide an equivalent level of data protection to that in your jurisdiction, we implement appropriate safeguards, such as standard contractual clauses approved by relevant data-protection authorities, binding corporate rules, or other recognised transfer mechanisms. By using lalabet.io and submitting your personal data, you acknowledge that your data may be transferred, stored, and processed in this manner.

6. Know Your Customer (KYC) and Identity Verification

As a licensed operator under the Curaçao eGaming framework, we are required to verify the identity of all players before processing withdrawals and, in some cases, before certain bonus stages or higher transaction limits become available. KYC verification is also an essential part of our AML and responsible-gambling obligations.

We may ask you to provide one or more of the following:

• A valid government-issued photo ID (passport, national identity card, or driving licence).
• Proof of address dated within the last three months (utility bill, bank statement, or official correspondence).
• Proof of ownership of the payment method you are using (e.g. a photograph of a bank card showing name and last four digits, or a screenshot of an e-wallet account).
• Source-of-funds or source-of-wealth documentation for higher-value transactions or where our compliance processes flag a requirement.

Failure to complete KYC verification satisfactorily may result in withdrawal delays, suspension of your ability to withdraw funds, or, in cases of suspected fraud or AML concern, account restriction. Documents you submit for KYC are stored securely and used only for the purposes described in this policy. We do not use KYC documents for marketing or share them with third parties except as required for verification, legal compliance, or fraud prevention.

7. Responsible Gambling and Data Protection

Lalabet Casino takes responsible gambling seriously. Where you interact with our responsible-gambling tools — including setting deposit limits, requesting cooling-off periods, or applying for self-exclusion — we record and retain that information to give effect to your choices, to prevent circumvention of restrictions, and to comply with our licensing obligations.

If you have self-excluded or applied a restriction, we will use your data (including name, email address, and device data) to identify and prevent you from opening a new account or circumventing your restriction. This processing is carried out in your vital interests and in compliance with our regulatory obligations. We may also share self-exclusion data with third-party responsible-gambling services or schemes where we are required or permitted to do so.

If you are concerned about your gambling behaviour, please use the responsible-gambling tools available on lalabet.io or contact our support team via 24/7 live chat or email.

8. Data Retention

We retain your personal data for as long as your account remains active and for a further period as required by applicable law, regulatory guidance, and our licensing conditions. In general terms:

• Account and transaction records are retained for a minimum of five years from the date of your last transaction or account closure, in line with AML and financial-record-keeping requirements.
• KYC documents are retained for the same minimum five-year period following account closure or the completion of the relevant transaction.
• Communications and support records are retained for the period necessary to resolve any dispute and thereafter for up to five years.
• Responsible-gambling records, including self-exclusion instructions and limit-setting history, are retained for as long as necessary to give effect to those decisions and to meet our regulatory obligations.
• Marketing consent records are retained until you withdraw consent and for a further period as evidence of that consent.

Once the applicable retention period has expired, we will securely delete or anonymise your personal data.

9. Your Rights

Depending on the data-protection laws applicable in your jurisdiction, you may have some or all of the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may ask us to correct inaccurate or incomplete personal data.
• Right to erasure: You may request that we delete your personal data in certain circumstances, for example where it is no longer necessary for the purpose for which it was collected. Note that we may be unable to fulfil an erasure request where we are required to retain data by law or for legitimate dispute-resolution purposes.
• Right to restriction of processing: You may ask us to restrict the processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your data to you in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on our legitimate interests or for direct-marketing purposes. We will stop processing for direct-marketing purposes immediately upon receipt of such an objection.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting our support team.

To exercise any of the above rights, please contact us using the details in Section 14. We will respond within the timeframe required by applicable law. We may ask you to verify your identity before processing your request.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) across all pages of lalabet.io.
• Secure storage of payment credentials; full card numbers are not retained on our servers — processing is handled by PCI-DSS compliant payment service providers.
• Access controls ensuring that only authorised personnel can access personal data, and only to the extent required to perform their role.
• Fraud-detection and device-fingerprinting systems to identify unauthorised account access.
• Regular review of our security practices and infrastructure.

You are also responsible for keeping your account credentials — username, password, and any two-factor authentication details — secure and confidential. If you suspect that your account has been compromised, please contact our support team immediately via 24/7 live chat or email.

11. Cookies and Similar Technologies

Lalabet.io uses cookies and similar tracking technologies to operate the site, remember your preferences, analyse usage, and deliver relevant content and promotions. By continuing to use lalabet.io, you consent to our use of cookies in accordance with this section.

11.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the operation of the site — enabling you to log in, navigate the casino and sportsbook lobbies, process transactions, and access your account. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, currency, and layout settings, and keep you logged in between sessions, including when using the PWA installed on your home screen.
• Performance and analytics cookies: Collect anonymised or aggregated information about how visitors use lalabet.io, which pages are most visited, and how the platform performs on different devices and browsers. This information is used to improve the site.
• Marketing and targeting cookies: Used, with your consent, to deliver promotional content relevant to your interests and to measure the effectiveness of our marketing campaigns.

11.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will affect the functionality of lalabet.io and may prevent you from accessing certain features. Instructions for managing cookies are available in the help documentation for your browser. You may also manage your marketing-cookie preferences through the cookie-consent tool on our site.

12. Children

Lalabet Casino is strictly for adults. We do not knowingly collect personal data from or provide services to any person under the age of 18. Age verification is part of our standard KYC process. If we become aware that we have inadvertently collected personal data from a person under 18, we will delete that data and close the associated account without delay. If you believe a minor has registered on lalabet.io, please notify us immediately via live chat or email.

13. Links to Third-Party Sites

lalabet.io may contain links to third-party websites or services, for example the sites of our game providers, payment processors, or responsible-gambling organisations. This policy applies only to lalabet.io. We are not responsible for the privacy practices of any third-party site, and we encourage you to review the privacy policies of any external sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will notify you by posting the updated policy on lalabet.io and, where appropriate, by sending you an email notification. The date of the most recent update is shown at the bottom of this page. Continued use of lalabet.io after a policy update constitutes your acceptance of the revised terms. If you do not agree to the updated policy, you should stop using the site and may request account closure.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data-protection rights, or have a concern about how we handle your personal data, please contact us using any of the following methods:

• Live Chat: Available 24/7 through lalabet.io — the fastest way to reach us.
• Email: Available through the contact form or support email address listed in the Help section of lalabet.io.

We aim to acknowledge all privacy-related enquiries promptly and to provide a substantive response within the timeframe required by applicable data-protection law. Where you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data-protection supervisory authority in your jurisdiction.

This Privacy Policy was last reviewed and updated in 2025. Lalabet Casino is operated under a Curaçao eGaming licence and accessible at lalabet.io.